Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20183/L6nfmd5pJ5ckEDG-fBCh1klkM_8.roa
File:                     L6nfmd5pJ5ckEDG-fBCh1klkM_8.roa (raw, json)
Hash identifier:          RTseDuXjgF3kFL2KcsKvhV/cclwUg+B9FW7WCOJNvUk=
Subject key identifier:   2F:A9:DF:99:DE:69:27:97:24:10:31:BE:7C:10:A1:D6:49:64:33:FF
Certificate issuer:       /CN=1606BEB137B88DBBEEBA7851A0A8F8D7D18294AF
Certificate serial:       80
Authority key identifier: 16:06:BE:B1:37:B8:8D:BB:EE:BA:78:51:A0:A8:F8:D7:D1:82:94:AF
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fga-sTe4jbvuunhRoKj419GClK8.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/L6nfmd5pJ5ckEDG-fBCh1klkM_8.roa
Signing time:             Fri 10 Feb 2023 07:43:46 +0000
ROA not before:           Fri 10 Feb 2023 07:43:46 +0000
ROA not after:            Mon 15 Jan 2024 01:30:02 +0000
asID:                     146979
IP address blocks:        202.236.90.184/32 maxlen: 32
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 128 (0x80)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1606BEB137B88DBBEEBA7851A0A8F8D7D18294AF
        Validity
            Not Before: Feb 10 07:43:46 2023 GMT
            Not After : Jan 15 01:30:02 2024 GMT
        Subject: CN=2FA9DF99DE692797241031BE7C10A1D6496433FF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:95:32:82:58:22:6f:ae:6c:71:99:34:2f:8d:
                    fa:b7:4b:72:ce:db:52:c2:77:d7:ec:fa:eb:e6:c7:
                    47:a4:18:71:41:22:80:75:30:7b:81:c3:03:9f:17:
                    1e:3c:bb:b6:49:23:41:2c:38:84:e8:2c:de:17:c9:
                    51:76:3a:91:9d:74:ee:77:2c:56:2c:3b:3d:aa:10:
                    5d:4c:55:2c:dd:9a:99:1b:68:d9:4a:9d:5a:04:6b:
                    5e:bd:8a:07:cd:f3:ef:da:4a:3f:17:ad:6a:4b:8b:
                    55:be:9a:0b:b3:60:03:88:f6:82:ab:20:a5:65:35:
                    5a:82:26:74:c8:79:3b:d4:98:1c:80:f0:29:43:b6:
                    94:f9:fa:2f:e5:ba:14:b3:71:38:e9:da:6b:d1:40:
                    cd:8f:61:cc:66:cf:f0:40:5e:ff:78:7f:f3:cd:4a:
                    ea:d5:6f:6c:7a:37:f4:23:a8:09:1a:6e:15:ea:a6:
                    30:2a:ce:cf:64:18:70:39:3e:34:23:ce:b4:11:f4:
                    c3:d8:e2:46:e7:1c:d4:7a:a5:4b:19:5b:e1:a7:fd:
                    0a:23:22:21:02:2c:59:c7:79:7a:80:02:e7:1b:c0:
                    b3:eb:70:df:70:ee:f3:f2:60:12:0c:53:67:87:cb:
                    4a:a9:c0:dc:4b:58:a4:43:40:64:2e:97:99:ea:39:
                    7f:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:A9:DF:99:DE:69:27:97:24:10:31:BE:7C:10:A1:D6:49:64:33:FF
            X509v3 Authority Key Identifier:
                keyid:16:06:BE:B1:37:B8:8D:BB:EE:BA:78:51:A0:A8:F8:D7:D1:82:94:AF

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/Fga-sTe4jbvuunhRoKj419GClK8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fga-sTe4jbvuunhRoKj419GClK8.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/L6nfmd5pJ5ckEDG-fBCh1klkM_8.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.236.90.184/32

    Signature Algorithm: sha256WithRSAEncryption
         37:ac:05:64:dc:2c:4a:48:32:80:88:56:eb:7e:8f:c8:b8:e5:
         6b:a6:0a:39:db:39:71:b7:56:8b:c8:7f:63:e1:81:c6:ff:bb:
         83:5d:ca:29:e2:bc:bc:ac:55:9f:24:3e:ba:c2:84:cd:38:71:
         76:13:ca:a0:e5:eb:39:df:f0:51:3e:c6:a2:77:6c:3d:e3:81:
         19:f3:ed:d2:ef:98:8e:cb:5b:6d:da:1b:c1:2b:66:da:7d:9c:
         6e:df:47:6f:d4:cd:fe:29:24:de:a2:79:11:30:68:a9:e6:19:
         4c:97:d1:3e:cd:26:9f:e4:8a:ff:99:28:79:b0:11:a8:2c:ae:
         99:7a:d1:a9:73:05:85:cd:d6:3a:00:77:50:f6:9a:ad:66:4e:
         e5:88:1d:6c:0f:d7:10:b9:ec:e9:9e:4a:87:71:bb:49:d9:0e:
         e4:3f:2d:16:f1:78:30:28:b6:8c:46:a2:4e:f0:1b:53:66:a9:
         17:b3:13:15:80:2b:12:39:38:bf:69:26:4e:8a:d1:59:46:39:
         57:19:11:3e:38:30:5d:02:f5:02:97:27:7f:b7:5f:c1:23:29:
         9b:7a:c5:ab:09:db:db:92:40:13:5a:09:dd:d6:c8:26:4e:a9:
         63:0d:d9:e4:23:c1:e5:1a:9e:a5:39:e6:d2:37:91:4c:e6:9f:
         2f:4b:38:88
-----BEGIN CERTIFICATE-----
MIIFDTCCA/WgAwIBAgICAIAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMTYw
NkJFQjEzN0I4OERCQkVFQkE3ODUxQTBBOEY4RDdEMTgyOTRBRjAeFw0yMzAyMTAw
NzQzNDZaFw0yNDAxMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDJGQTlERjk5REU2OTI3
OTcyNDEwMzFCRTdDMTBBMUQ2NDk2NDMzRkYwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCxlTKCWCJvrmxxmTQvjfq3S3LO21LCd9fs+uvmx0ekGHFBIoB1
MHuBwwOfFx48u7ZJI0EsOIToLN4XyVF2OpGddO53LFYsOz2qEF1MVSzdmpkbaNlK
nVoEa169igfN8+/aSj8XrWpLi1W+mguzYAOI9oKrIKVlNVqCJnTIeTvUmByA8ClD
tpT5+i/luhSzcTjp2mvRQM2PYcxmz/BAXv94f/PNSurVb2x6N/QjqAkabhXqpjAq
zs9kGHA5PjQjzrQR9MPY4kbnHNR6pUsZW+Gn/QojIiECLFnHeXqAAucbwLPrcN9w
7vPyYBIMU2eHy0qpwNxLWKRDQGQul5nqOX8JAgMBAAGjggIpMIICJTAdBgNVHQ4E
FgQUL6nfmd5pJ5ckEDG+fBCh1klkM/8wHwYDVR0jBBgwFoAUFga+sTe4jbvuunhR
oKj419GClK8wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBoBgNVHR8EYTBfMF2g
W6BZhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzIwMTgzL0ZnYS1zVGU0amJ2dXVuaFJvS2o0MTlHQ2xLOC5jcmwwbQYI
KwYBBQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9y
eS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwL0ZnYS1zVGU0amJ2dXVuaFJvS2o0
MTlHQ2xLOC5jZXIwDgYDVR0PAQH/BAQDAgeAMIG9BggrBgEFBQcBCwSBsDCBrTBj
BggrBgEFBQcwC4ZXcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2Fw
L0E5MUE3MzgxMDAwMC8yMDE4My9MNm5mbWQ1cEo1Y2tFREctZkJDaDFrbGtNXzgu
cm9hMEYGCCsGAQUFBzANhjpodHRwczovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQu
anAvcnJkcC9hcC9ub3RpZmljYXRpb24ueG1sMCAGCCsGAQUFBwEHAQH/BBEwDzAN
BAIAATAHAwUAyuxauDANBgkqhkiG9w0BAQsFAAOCAQEAN6wFZNwsSkgygIhW636P
yLjla6YKOds5cbdWi8h/Y+GBxv+7g13KKeK8vKxVnyQ+usKEzThxdhPKoOXrOd/w
UT7GondsPeOBGfPt0u+YjstbbdobwStm2n2cbt9Hb9TN/ikk3qJ5ETBoqeYZTJfR
Ps0mn+SK/5koebARqCyumXrRqXMFhc3WOgB3UPaarWZO5YgdbA/XELns6Z5Kh3G7
SdkO5D8tFvF4MCi2jEaiTvAbU2apF7MTFYArEjk4v2kmTorRWUY5VxkRPjgwXQL1
Apcnf7dfwSMpm3rFqwnb25JAE1oJ3dbIJk6pYw3Z5CPB5RqepTnm0jeRTOafL0s4
iA==
-----END CERTIFICATE-----
Generated at Sat Apr 26 18:22:56 2025 by rpki-client